← Vulnerability feed

Vulnerability record · CVE-2017-7432 · published 3 May 2017

CVE-2017-7432: Novell imanager vulnerability

Novell · Imanager

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

9.8 CVSS 3.0 Critical EPSS 1.5% · top 26.4%
9.8CVSS 3.0 base score, v2 7.5
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.novell.com/show_bug.cgi?id=1027619
https://dl.netiq.com/Download?buildid=24FxpmqdThE~
https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
https://www.netiq.com/support/kb/doc.php?id=7016795
https://www.novell.com/support/kb/doc.php?id=7010166
https://bugzilla.novell.com/show_bug.cgi?id=1027619
https://dl.netiq.com/Download?buildid=24FxpmqdThE~
https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
https://www.netiq.com/support/kb/doc.php?id=7016795
https://www.novell.com/support/kb/doc.php?id=7010166

Track CVE-2017-7432 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3268Novell imanager improper authentication vulnerabilityNovell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.EPSS 1.6%9.3CVE-2005-1730Novell imanager vulnerabilityMultiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL po…EPSS 4.6%9.0CVE-2010-1929Novell imanager memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in …EPSS 16%8.8CVE-2018-1345Netiq imanager vulnerabilityNetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.EPSS 0.65%8.8CVE-2017-7431Novell imanager cross-site request forgery vulnerabilityNovell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.EPSS 0.58%8.6CVE-2018-1344Netiq imanager vulnerabilityAddresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1EPSS 0.86%7.8CVE-2006-4517Novell imanager vulnerabilityNovell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP …EPSS 3.2%7.5CVE-2017-5189Netiq imanager insufficiently protected credentials vulnerabilityNetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extrac…EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2017-7432), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.